Technology Tooling
A list of components and if they have been approved for use in UKHSA technology solutions.
| Name | Approval Status | Description |
|---|---|---|
| Appvance AIQ | Approved | AIQ is an AI/ML software quality platform designed with intelligent, autonomous testing. |
| Browserstack | Approved | Functional test automation - app & browser testing |
| CLAMAV | Approved | A free, open-source, cross-platform antimalware toolkit able to detect many types of malware, including viruses |
| Cucumber | Approved | Automated UI testing- collaboration platform for BDD - an easy-to-use tool to define ideas, test code, and learn in production from real-time insight |
| Draw.io | Approved | Cross-platform graph drawing software application. Its interface can be used to create diagrams such as flowcharts, wireframes, UML diagrams, organizational charts, and network diagrams. |
| Figma | Approved | A collaborative web application for user interface design. |
| BitBucket | Approved | A Git-based source code repository hosting service owned by Atlassian. |
| Confluence Cloud SaaS Hosting | Approved | Confluence is a collaboration wiki tool used to help teams to collaborate and share knowledge. |
| Jira | Approved | Helps teams plan, assign, track, report, and manage work. |
| Jira ServiceDesk | Approved | A reliable help desk software offered by Atlassian allowing customers to report bugs, contact you for help, access your knowledge base, and request new changes. |
| Jira XRay Plugin | Approved | Tool to manage quality assurance tests which integrates seamlessly with Jira. It supports both manual and automated tests and provides useful reports to track the quality and requirement coverage of your projects. |
| Jira Workflow | Approved | A set of statuses and transitions that an issue moves through during its lifecycle and typically represents processes within your organization |
| Opsgenie | Approved | Incident management platform for operating always-on services, empowering Dev and Ops teams to plan for service disruptions and stay in control during incidents. |
| Git | Approved | A distributed version control system (VCS). |
| GitHub | Approved | A Git repository hosting service. |
| Flake8 | Approved | A Python library for validating code against PEP8 style guide rules. |
| Github Enterprise | Approved | With GitHub Enterprise, your team can work together on projects from anywhere. Features like issues, branches, commits, and pull requests make it possible to discuss and review code—no matter where you are. |
| Isort | Approved | A Python library for sorting import statements. |
| npm | Approved | A package Manager for Javascript that allows developers to install, manage and package dependencies. Used to manage the project’s dependencies. |
| Papaparse | Approved | A flexible JavaScript library for parsing and converting CSV files. Used to read and parse the CSV files for push testing |
| Playwright | Approved | E2E testing library for modern web apps. |
| Prowler | Approved | Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more |
| Renovate | Approved | Automated dependency updates covering multiple platforms and languages. |
| GitLab Community | Approved | A web-based Git repository that provides free open and private repositories, issue-following capabilities, and wikis. It is a complete DevOps platform that enables professionals to perform all the tasks in a project—from project planning and source code management to monitoring and security. |
| YAML | Approved | A human-readable data serialization standard that can be used in conjunction with all programming languages and is often used to write configuration files. |
| Terraform | Approved | An open-source infrastructure as code software tool that provides a consistent CLI workflow to manage hundreds of cloud services. |
| Airtable | Approved | Cloud-based collaboration service providing a spreadsheet/database hybrid for managing data. |
| Ansible | Approved | An open-source software provisioning, configuration management, and application-deployment tool enabling infrastructure as code |
| PyCharm | Approved | Python IDE |
| Power Apps & Automate | Approved | Is a declarative environment that uses connectors to give you access to content that can be edited in a UI. Power Automate is a workflow engine that uses the same connectors to give you access to content for automated processing. |
| Jenkins | Approved | An open source continuous integration/continuous delivery and deployment (CI/CD) automation software DevOps tool written in the Java programming language. It is used to implement CI/CD workflows, called pipelines. |
| SimPy | Approved | A process-based discrete-event simulation framework based on standard Python. |
| @testing-library/jest-dom | Approved | A set of custom matches for jest that provide better assertions for testing DOM nodes. Used to extend Jest’s built-in matchers, allowing for more expressive and readable tests when asserting on DOM elements. |
| @testing-library/react | Approved | A library for testing React components, providing utilities for rendering components and querying the DOM. Used to render React components in tests and interact with the rendered output to verify component behaviour and structure. |
| @testing-library/user-event | Approved | A library for simulating user interactions with the DOM elements, providing a more realistic testing experience. Used to simulate user events such as clicks, typing, and other interactions in tests for the SRS applications components. |
| Autoflake | Approved | A Python library that removes unused imports and variables. |
| axios-mock-adapter | Approved | A library that allows developers to easily mock Axios requests for testing purposes. Used to simulate Axios API calls in tests, allowing developers to control responses and test various scenarios without hitting real endpoints. |
| axios | Approved | A promise based HTTP client for making requests from the browser. Used for making API requests to fetch or send data to back-end services. |
| Black | Approved | Black is a PEP 8 compliant opinionated formatter. Black reformats entire files in place. Style configuration options are deliberately limited and rarely added. |
| crypto-random-string | Approved | A utility to generate cryptographically secure random strings. Used for generating secure random sessions tokens and keys. |
| Cypress | Approved | E2E testing library for JavaScript. |
| DevContainer | Approved | Local development tooling standard. |
| eslint | Approved | A static code analysis tool for identifying and fixing problem in JavaScript code to improve quality and maintainability. Used to enforce coding standards and detect code quality issues, helping to maintain a consistent codebase. |
| Jest Runner | Approved | A visual studio Code extension that provides a user-friendly interface for running Jest tests directly from the editor. |
| jest | Approved | A Javascript testing framework designed to ensure correctness of any Javascript codebase. Used for writing and running tests for the SRS applications. |
| JUnit | Approved | Java testing framework |
| Nx Console | Approved | A Visual Studio Code extension that provides a graphical interface for interacting with Nx workspaces, facilitating project management. |
| Postman | Approved | Toolkit for exploring, managing, and testing APIs |
| Prettier-Code Formatter | Approved | A visual Studio Code extension that formats code consistently across various languages and frameworks based on defined style rules. |
| prettier | Approved | An opinionated code formatter that enforces consistent style by parsing code and reprinting it with rules. |
| Pydantic | Approved | Data validation library for Python. |
| pytest | Approved | Test library for Python |
| QGIS | Approved | Geographic information system (GIS) software, allowing users to analyze and edit spatial information, in addition to composing and exporting graphical maps. QGIS supports both raster and vector layers; vector data is stored as either point, line, or polygon features. |
| sonarqube | Approved | Code quality CI tool |
| SQLAlchemy | Approved | Python ORM library |
| Taurus | Approved | Open source test automation framework |
| TFLint | Approved | A framework for linting Terraform projects. |
| Uvicorn | Approved | ASGI server |
| vite | Approved | A fast, modern build tool for web applications. |
| Dependabot | Approved | Dependabot creates pull requests to keep your dependencies secure and up-to-date. |
| Loqate Software | Approved | Loquate software Improve data quality by capturing correct UK addresses. Boost conversions and user experience with postcode address verification and geocoding technology. |
| IUCLID6 PCN Conversion Utility | Approved | A custom developed IUCLID6 PCN conversion utility that turns an i6z (iuclid6 zip) containing multiple xml files into a PDF |
| WagTail | Approved | An open-source content management system built on Django, with a strong community and commercial support. It’s focused on user experience and offers precise control for designers and developers. |
| WireShark | Approved | Wireshark is an open source network traffic analyzer. |
| Specflow | Discuss first | Functional Test Automation in native language using the easy to understand Gherkin syntax |
| Miro | Discuss first | An online collaborative whiteboard platform that enables distributed teams to work effectively together, from brainstorming with digital sticky notes to planning and managing agile workflows. |
| SCEPman | Discuss first | SCEPman is cloud-based certification authority. It easily enables Intune and JAMF managed clients for certificate based WiFi authentication. It can issue certificates for clients (device & users) as well as AD Domain controllers and support Hybrid Key Trust for Windows Hello for Business. |
| Nunit | Discuss first | Test framework for .NET |
| Jira Service Management | Discuss with UKHSA before use | Jira Service Management is a comprehensive IT service management (ITSM) platform developed by Atlassian. It is designed to help IT and support teams streamline incident management, change management, problem resolution, and service request fulfillment. |
| Checkov | Discuss with UKHSA before use | Checkov scans cloud infrastructure configurations to find misconfigurations before they’re deployed. |
| Eclipse IDE | Discuss with UKHSA before use | Base workspace and an extensible plug-in system for customizing an integrated java development environment |
| nx | Discuss with UKHSA before use | A smart, extensible build framework designed for monorepos, providing tools for managing and scaling applications efficiently. The NX framework is shipped with a list of it’s own dependencies including but not limited to @nx/cypress , @nx/eslint , @nx/eslint-plugin , @nx/jest , @nx/js , @nx/react , @nx/vite , @nx/web , @nx/workspace Used to manage multi-project (applications and libraries), streamline development workflows, and optimise builds. |
Published: 16 September 2025
Last updated: 17 October 2025
Page Source